aloux-iam 0.0.5 → 0.0.7

package/lib/auth.js

@@ -0,0 +1,91 @@
+const jwt = require('jsonwebtoken')
+const User = require('./models/User')
+const Permission = require('./models/Permission')
+
+const getAccess = (user, resource) => {
+    for(let i in user._functions){
+        for(let j in user._functions[i]._permissions){
+            if(user._functions[i]._permissions[j].status === 'Activo'){
+                const permissionBack = user._functions[i]._permissions[j].method + ' ' + user._functions[i]._permissions[j].endpoint
+                if(permissionBack === resource.method + ' ' + resource.endpoint){
+                    return true
+                }
+            }
+        }
+    }
+    return false
+}
+
+const auth = async(req, res, next) => {
+
+    try {
+        
+        let token = req.cookies.token || req.header('Authorization')
+
+        if (!token) {
+            throw {
+                code: 401,
+                title: 'Error de autenticación',
+                detail: 'Endpoint requiere token',
+                suggestion: 'Vuelve a iniciar sesion',
+                error: new Error()
+              }
+        }
+
+        token = token.replace('Bearer ', '')
+
+        const data = jwt.verify(token, process.env.AUTH_SECRET)
+        const user = await User.findOne({ _id: data._id, 'tokens.token': token, status: 'Activo' }, {"tokens":0,pwd:0}).populate({ path: "_functions", populate: [{ path: "_permissions"}] }).lean()
+        
+        if (!user) {
+            throw {
+                code: 401,
+                title: 'Error de autenticación',
+                detail: 'No se encontró el usuario',
+                suggestion: 'Vuelve a iniciar sesion',
+                error: new Error()
+              }
+        }
+
+        const resource = await Permission.findOne({ method: req.originalMethod, endpoint: req.route.path }).lean()
+        if(!resource){
+            throw {
+                code: 403,
+                title: 'Error de recurso',
+                detail: 'No se encontro  dado de alta el privilegio del endpoint: [' + req.route.path + ']',
+                suggestion: 'Contacta con el administrador',
+                error: new Error()
+              }
+        }
+
+        if(!resource.default){
+            const access = getAccess(user, resource)
+            if (!access) {
+                throw {
+                    code: 403,
+                    title: 'Error de permisos',
+                    detail: 'No cuentas con permisos para el recurso [' + resource.api +'] que: ' + (resource ? resource.description : 'Recurso indefinido' ),
+                    suggestion: 'Contacta con el administrador',
+                    error: new Error()
+                  }
+            }
+        }
+
+        req.user = user
+        req.token = token
+        next()
+    } catch (error) {
+        let obj = error
+        if(!error.code){
+            obj = {
+                code: 401,
+                title: 'Error de autenticación',
+                detail: error.message,
+                suggestion: 'Vuelve a iniciar sesion'
+            }
+        }
+        res.status(obj.code).send(obj)
+    }
+}
+
+module.exports = auth

package/lib/swagger.yaml

@@ -71,7 +71,7 @@ paths:
                 type: object
                 items: 
                   type: string
-  /iam/user/send/verify/mail: 
+  /iam/auth/verify/mail: 
     post: 
       tags: 
         - users - self 
@@ -145,6 +145,74 @@ paths:
                 type: object
                 items: 
                   type: string
+  /iam/auth/signup:
+    post:
+      summary: Registrarse
+      tags:
+        - users - self
+      description: Crea una cuenta
+      requestBody:
+        content:
+          'application/json':
+            schema:
+              properties:
+                  name:
+                    description: Name
+                    type: string
+                    example: Arturo
+                  lastName:
+                    description: Last name
+                    type: string
+                    example: Vázquez
+                  phone:
+                    description: Phone
+                    type: string
+                    example: 1234567891011
+                    maxLength: 13
+                  email: 
+                    description: email
+                    type: string
+                    example: developer@aloux.mx
+                  pwd:
+                    description: password
+                    type: string
+                    example: password
+                    minLength: 8
+                  data:
+                    type: object
+                    properties:
+                      age:
+                        description: Age
+                        type: integer
+                        example: 26
+                      gender:
+                        description: Gender
+                        type: string
+                        enum: ["male","female"]
+                      scholarship:
+                        description: Scholarship
+                        type: string
+                        example: university
+                      Entity:
+                        description: Entity
+                        type: string
+                        example: Puebla
+              required:
+                - name
+                - lastName
+                - phone
+                - email
+                - pwd
+                - data
+      responses:
+        '200':    # status code
+          description: Ok
+          content:
+            application/json:
+              schema: 
+                type: object
+                items: 
+                  type: string
   /iam/auth/validate/code:
     post:
       summary: Verificar código

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "aloux-iam",
-    "version": "0.0.5",
+    "version": "0.0.7",
     "description": "Aloux IAM for APIs ",
     "main": "index.js",
     "scripts": {